Security Affairs newsletter Round 303

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the international press subscribe here.

Bug bounty hacker earned $5,000 reporting a Stored XSS flaw in iCloud.com
Experts warn of threat actors abusing Google Alerts to deliver unwanted programs
FBI warns of the consequences of telephony denial-of-service (TDoS) attacks
An attacker was able to siphon audio feeds from multiple Clubhouse rooms
Georgetown County has yet to recover from a sophisticated cyber attack
NSA Equation Group tool was used by Chinese hackers years before it was leaked online
Researchers uncovered a new Malware Builder dubbed APOMacroSploit
Ukraine sites suffered massive attacks launched from Russian networks
FIN11 cybercrime group is behind recent wave of attacks on FTA servers
IBM addressed flaws in Java Runtime, Planning Analytics Workspace, Kenexa LMS
NurseryCam daycare cam service shut down after security breach
Twitter removes 100 accounts linked to Russia disseminating disinformation
VMware addresses a critical RCE issue in vCenter Server
A Cryptomining botnet abuses Bitcoin blockchain transactions as C2 backup mechanism
Airplane manufacturer Bombardier has disclosed a security breach, data leaked online
APT32 state hackers target human rights defenders with spyware
Ukraine: nation-state hackers hit government document management system
Cisco fixes three critical bugs in ACI Multi-Site Orchestrator, Application Services Engine, and NX-OS
Google discloses technical details of Windows CVE-2021-24093 RCE flaw
North Korea-linked Lazarus APT targets defense industry with ThreatNeedle backdoor
Thousands of VMware Center servers exposed online and potentially vulnerable to CVE-2021-21972 flaw
China-linked TA413 group target Tibetan organizations
Data Breach: Turkish legal advising company exposed over 15,000 clients
Hackers are selling access to Biochemical systems at Oxford University Lab
Microsoft releases open-source CodeQL queries to assess Solorigate compromise
New Ryuk ransomware implements self-spreading capabilities
Experts found a critical authentication bypass flaw in Rockwell Automation software
Hotarus Corp gang hacked Ecuadors Ministry of Finance and Banco Pichincha
T-Mobile customers were hit with SIM swapping attacks

If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

The post Security Affairs newsletter Round 303 appeared first on Security Affairs.

If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.

Discord

Original Source